create-egregore 0.13.0 → 0.14.1

package/lib/auth.js

@@ -5,8 +5,7 @@
 
 const https = require("node:https");
 
-const CLIENT_ID = "Iv23li2obNsAjakoK2RE";
-const SCOPE = "";  // GitHub App — permissions managed via installation, not OAuth scope
+const CLIENT_ID = "Iv23li2obNsAjakoK2RE";  // GitHub App — clean consent, permissions via installation
 
 function post(url, body) {
   return new Promise((resolve, reject) => {
@@ -73,15 +72,12 @@ function copyToClipboard(text) {
 /**
  * Run GitHub Device Flow.
  * Returns the access token string, or throws on failure.
- * @param {object} ui - UI module for output
- * @param {object} [opts] - Options
- * @param {string} [opts.scope] - Override OAuth scope (e.g. "repo" for join flow)
  */
-async function deviceFlow(ui, opts = {}) {
+async function deviceFlow(ui) {
   // 1. Request device code
   const codeResp = await post("https://github.com/login/device/code", {
     client_id: CLIENT_ID,
-    scope: opts.scope ?? SCOPE,
+    scope: "",
   });
 
   if (!codeResp.device_code) {

package/lib/local.js

@@ -568,11 +568,18 @@ async function localJoinFlow(orgArg, ui) {
     explicitRepo = null;
   }
 
-  // 1. GitHub auth — repo scope needed to access repos on other accounts
+  // 1. Install GitHub App — needed for the token to access repository resources
   ui.info(`Joining ${ui.bold(orgLogin)}. First, sign in with GitHub.\n`);
+  ui.info("Install the Egregore app on your GitHub account.");
+  ui.info("This lets Egregore access the repos you've been invited to.\n");
+  openBrowser(APP_INSTALL_URL);
+  await ui.prompt("Press Enter when done...");
+
+  // 2. GitHub auth (auto-approved after App install)
+  ui.info("");
   let githubToken;
   try {
-    githubToken = await deviceFlow(ui, { scope: "repo" });
+    githubToken = await deviceFlow(ui);
     ui.success("Authenticated with GitHub");
   } catch (err) {
     ui.error(`GitHub auth failed: ${err.message}`);
@@ -701,7 +708,7 @@ async function localJoinFlow(orgArg, ui) {
   registerInstance(repoName, orgName, egregoreDir);
   const alias = await installShellAlias(egregoreDir, ui);
 
-  // 11. Clone managed repos
+  // 11. Clone managed repos (retry once — git servers may lag behind invitation acceptance)
   for (let i = 0; i < managedRepos.length; i++) {
     const mr = managedRepos[i];
     ui.step(6 + i, totalSteps, `Cloning ${mr}...`);
@@ -711,7 +718,15 @@ async function localJoinFlow(orgArg, ui) {
       cloneRepo(repoUrl, repoDir, githubToken, ui, mr);
       setGitIdentity(repoDir, user);
     } catch {
-      ui.warn(`Could not clone ${mr} — you may not have access yet.`);
+      // Retry after a short delay — invitation acceptance may not have propagated
+      await new Promise((r) => setTimeout(r, 3000));
+      try {
+        const repoUrl = `https://github.com/${orgLogin}/${mr}.git`;
+        cloneRepo(repoUrl, repoDir, githubToken, ui, mr);
+        setGitIdentity(repoDir, user);
+      } catch {
+        ui.warn(`Could not clone ${mr} — you may not have access yet.`);
+      }
     }
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-egregore",
-  "version": "0.13.0",
+  "version": "0.14.1",
   "description": "Set up Egregore for your team in one command",
   "license": "MIT",
   "bin": {